Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
File: 1eglbE9iHYxMFwZl6HjqiOy7P1E.mft (raw, json)
Hash identifier: 8D5KS8IxfNLWCg0OqcFS7YFh7E813CbDZ/5m0YyGVOw=
Subject key identifier: 3B:58:6F:C1:B5:18:1B:38:41:39:6B:55:2D:13:6E:63:A2:F4:6E:FF
Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
Certificate issuer: /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Certificate serial: 019A7149E4B346FB49FB98437830A0B1B789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: 1eglbE9iHYxMFwZl6HjqiOy7P1E.crl (hash: SfdT79kXC8Asur66385aGvr0Jg0zl3L0cEFmkpBJvDg=)
2: s19cTegZPcgfvMn79U7vcydThPE.roa (hash: V3xH7pf/IllOyz6AG2kCqa1+TkH2gfpLo44RkSGpMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e4:b3:46:fb:49:fb:98:43:78:30:a0:b1:b7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=3b586fc1b5181b3841396b552d136e63a2f46eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:80:b1:bb:b4:2f:61:8a:c6:0b:62:f7:1c:
5b:f4:69:1c:19:e8:b4:44:c6:10:d9:15:63:71:1d:
7d:c3:c8:94:93:e6:b3:c0:59:60:b1:fd:17:e7:d7:
ac:32:48:cb:c0:04:4d:ec:31:77:9a:9d:45:d6:d3:
0b:9a:4d:84:c8:80:01:a5:49:88:38:e6:d6:c8:7a:
e2:67:14:17:66:6a:d3:a3:db:f0:45:a2:87:d9:19:
c9:cb:18:cc:06:b8:e6:2d:d4:33:00:79:8d:a3:f7:
02:79:82:92:bd:d5:4b:6b:5f:b8:99:05:7d:48:be:
50:19:11:40:94:fc:f0:c5:a4:4e:4c:5f:b1:3d:53:
40:81:97:f9:49:79:4f:3c:5e:55:8d:dd:77:90:58:
02:cf:a0:14:0f:b5:31:88:0b:a5:ef:02:45:b8:5e:
3e:4d:77:96:10:49:3f:3a:82:78:1d:f9:fa:a5:11:
ff:ac:82:56:83:d1:e3:17:f7:76:18:b9:8e:7a:6c:
9e:a1:37:b0:09:91:8b:eb:10:80:1a:1d:ab:b8:b7:
5d:10:c3:89:ba:50:7d:ce:ed:54:d2:40:6e:a2:f2:
a6:1f:cd:62:31:06:33:4f:ce:4c:12:58:b9:a5:2f:
a5:2f:b6:b9:d2:e3:1e:bc:d8:87:d9:4d:a4:c2:15:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:58:6F:C1:B5:18:1B:38:41:39:6B:55:2D:13:6E:63:A2:F4:6E:FF
X509v3 Authority Key Identifier:
keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:89:7d:0a:6d:10:ed:c7:45:dd:e5:be:ec:87:e6:54:23:92:
4d:bb:ca:3f:4a:e1:80:7e:2f:de:b7:84:b9:80:95:93:85:07:
80:80:94:bd:90:b0:2d:98:d8:8d:78:16:a4:80:33:f9:68:c1:
db:db:db:f4:5c:67:4d:a8:ce:d5:31:7c:44:64:e9:0a:f8:70:
01:51:e5:7e:c7:a9:50:39:ce:67:e9:ba:fc:40:c3:c0:8d:57:
7e:89:50:02:66:dc:65:f2:6a:ff:e7:58:da:e8:a5:51:94:32:
1c:c7:1c:74:78:d9:9b:45:8d:8d:85:bd:1d:5a:c4:5f:dd:ca:
55:fc:a1:90:04:c5:8c:07:21:4d:c3:0f:05:d0:d0:0e:8b:62:
f3:25:f5:20:db:1b:c4:7c:ea:e3:e5:fe:d0:c1:eb:d0:44:69:
25:b7:2f:6a:cf:87:e3:07:57:ef:e6:44:c0:5a:27:ba:91:90:
63:8d:3b:b0:cd:d7:41:f3:2c:dd:89:64:26:1f:51:b7:af:59:
32:a4:c4:2c:b2:41:dc:14:0f:01:c4:f4:01:1f:78:fb:d2:53:
50:0b:a3:35:cc:f5:67:9d:68:73:53:8a:a9:10:6e:98:66:b5:
bd:9b:8c:8b:6e:02:b5:36:ae:02:d5:96:2a:61:bf:11:86:e5:
d1:40:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:31 2025 by rpki-client